Re: SELinux testing

>>>>> "GD" == Greg DeKoenigsberg <gdk@xxxxxxxxxx> writes:

GD> Another big +1.  The unfortunate side effect here is that it's
GD> possible -- even likely -- that most community packagers won't
GD> give two craps about the SELinux SIG.

Well, don't underestimate your reviewers.  I know enough to point out
some packages which will likely have selinux issues even though I am
not generally able to test them under selinux.

What has been a problem (for instance, in the Bugzilla review) is that
even given an SELinux policy to test, nobody involved could do the
testing.  I tried but I just ended up wasting a couple of hours on
relabels and ending up with a machine that needed to be reinstalled.
Fortunately I have plenty of machines around that I can hack on; many
reviewers and packagers aren't so blessed.

I note that the submitter/maintainer of the Extras Bugzilla package is
@redhat.com.

The review ticket is
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188359

 - J<